So we have two servers that we allow access to via parallels client and in our DC's event viewer I keep getting multiple credential validation errors (event 4776) for these two servers. The audit failures use the server's name as the logon account as well as the source workstation with an error code of 0xC0000064.

I'm thinking that it may be old credentials from remote users computers? Can that cause this?

Anyone here ever have these issues and can confirm it was due to parallels client?